Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Netskope Exam NSK101 Topic 3 Question 38 Discussion

Actual exam question for Netskope's NSK101 exam
Question #: 38
Topic #: 3
[All NSK101 Questions]

A company is attempting to steer traffic to Netskope using GRE tunnels. They notice that after the initial configuration, users cannot access external websites from their browsers.

What are three probable causes for this issue? (Choose three.)

Show Suggested Answer Hide Answer
Suggested Answer: B, C, D

In this scenario, there are three probable causes for the issue of users not being able to access external websites from their browsers after attempting to steer traffic to Netskope using GRE tunnels. One cause is that the configured GRE peer in the Netskope platform is incorrect, which means that the Netskope POP that is supposed to receive the GRE traffic from the customer's network is not matching the IP address of the customer's router that is sending the GRE traffic. This will result in a failure to establish a GRE tunnel between the customer and Netskope. Another cause is that the corporate firewall might be blocking GRE traffic, which means that the firewall rules are not allowing the GRE protocol (IP protocol number 47) or the UDP port 4789 (for VXLAN encapsulation) to pass through. This will result in a failure to send or receive GRE packets between the customer and Netskope. A third cause is that the route map was applied to the wrong router interface, which means that the configuration that specifies which traffic should be steered to Netskope using GRE tunnels was not applied to the correct interface on the customer's router. This will result in a failure to steer the desired traffic to Netskope. The pre-shared key for the GRE tunnel is incorrect is not a probable cause for this issue, as GRE tunnels do not use pre-shared keys for authentication or encryption. Netskope does support GRE tunnels, so this is not a cause for this issue either.Reference:[Netskope Secure Forwarder],Netskope Security Cloud Operation & Administration (NSCO&A) - Classroom Course, Module 3: Steering Configuration, Lesson 3: Secure Forwarder.


Contribute your Thoughts:

Letha
2 days ago
I'm going with C - the corporate firewall is probably blocking the GRE traffic. That's always the first thing I check.
upvoted 0 times
...
Karl
5 days ago
I agree with Noelia. The GRE peer in the Netskope platform might also be incorrect.
upvoted 0 times
...
Leah
5 days ago
The pre-shared key is definitely the problem. I can't believe they'd mess that up. Rookie mistake!
upvoted 0 times
...
Noelia
8 days ago
I think the pre-shared key for the GRE tunnel could be incorrect.
upvoted 0 times
...

Save Cancel